This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json) Hash identifier: Vkd2TgklGrr4LsVjgV7eZYH7PiK6pAdox+OmO4s7GXE= Subject key identifier: CD:00:92:7F:C8:49:16:D3:75:60:8F:3F:60:00:F9:41:0A:65:43:63 Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b Certificate serial: 019B32D72C925F6ACF99AD5BFE8E79A57258 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft Manifest number: 1264 Signing time: Thu 18 Dec 2025 19:02:00 +0000 Manifest this update: Thu 18 Dec 2025 19:02:00 +0000 Manifest next update: Fri 19 Dec 2025 19:02:00 +0000 Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: nQlZSeKJdiS+FlB4/sN1dAN5YEbFtvQSS6UBHgi8VGg=) 2: cwCE2hhjusn86QvOu2pcA9KTbHA.roa (hash: NxYhK1mgxO/73LOxU0Rf/stDIA61i1imewNDavbu5Zs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:2c:92:5f:6a:cf:99:ad:5b:fe:8e:79:a5:72:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b Validity Not Before: Dec 18 19:02:00 2025 GMT Not After : Dec 19 19:02:00 2025 GMT Subject: CN=cd00927fc84916d375608f3f6000f9410a654363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2e:4c:be:ae:03:83:d9:7f:34:ee:f0:9b:3e: 77:24:4d:a9:6a:31:6e:d3:53:4d:82:2f:ac:4a:3b: 4f:19:43:51:db:c4:3c:20:ce:3f:a7:20:a3:05:f3: 2b:14:18:4d:03:62:6b:c2:7b:c5:96:46:b5:6e:53: 79:e5:b6:25:f8:35:08:c6:f9:2e:22:67:0d:2d:cc: ca:05:9b:6b:88:cf:c4:e1:79:a6:d7:f9:d4:76:6d: 29:63:70:9b:7d:3c:9f:26:a0:43:18:af:6d:cf:a5: 14:bc:76:68:8c:7a:e9:98:a4:2c:74:f8:c3:7a:64: 97:5f:42:ea:c1:51:67:a6:4d:e3:cc:5f:66:6d:e2: 13:78:86:ac:e8:b6:54:62:bb:ef:6a:5b:bb:43:c3: ec:ca:e0:20:bd:68:08:ea:69:e7:64:cb:e7:2f:a9: 73:16:be:97:9f:8c:ba:32:33:a1:5c:66:17:ac:89: c7:14:a1:df:1a:06:ca:79:d3:6c:95:69:d7:23:36: d4:73:91:2d:e1:24:9d:00:5f:fa:83:be:89:14:fc: 20:c2:7b:39:bb:cb:0d:10:b7:06:16:85:2b:ae:cc: 89:38:ed:ca:70:39:87:c9:f5:57:5e:e7:8e:06:1b: 89:97:e1:4e:ce:08:ac:b2:61:8d:54:25:d0:34:d5: 1d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:00:92:7F:C8:49:16:D3:75:60:8F:3F:60:00:F9:41:0A:65:43:63 X509v3 Authority Key Identifier: keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:12:71:b2:e1:63:e6:86:45:7b:51:85:16:f4:91:1b:6e:36: 5d:ac:9d:cc:a8:50:49:59:b3:69:8e:9a:bb:ca:80:2e:57:4f: d4:e0:11:98:c4:de:85:fe:14:22:d6:b8:23:69:c3:b6:98:b9: 14:6e:90:90:18:bb:33:12:9d:2e:da:35:c3:a9:59:51:c3:9d: 80:01:99:7a:5b:59:01:a4:80:63:75:4a:4c:4f:be:83:49:8b: 85:73:62:1f:57:8c:98:15:1d:bf:0c:e1:b8:91:24:31:5f:ab: 34:63:88:7f:23:c5:29:1a:4a:97:b0:1a:e1:f7:85:d4:c6:8a: 74:d4:84:6c:a3:ad:43:6f:01:59:c9:ad:15:d2:69:13:42:b8: ca:0c:e4:0b:8d:5e:0e:c7:b3:76:4e:79:2b:31:a8:c7:22:c9: 15:02:0f:55:c9:40:50:55:c5:5d:d5:3c:e1:54:31:2a:83:05: 84:0a:61:30:6e:7b:af:ec:2b:1c:fd:98:d4:ac:7e:a1:2d:e8: 94:44:4e:22:5d:f4:33:3e:c7:58:0b:6b:8e:29:fb:7d:ec:73: 75:dc:30:56:b5:76:02:8a:75:51:09:57:0b:0d:4c:3c:ae:e3: a4:cb:fd:fc:62:0b:5a:de:d6:cd:16:36:b1:c0:bb:6d:5e:8b: ce:6e:ef:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1yySX2rPma1b/o55pXJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ODk4MjNiYTE0NzU4MDA3Y2RlODczYWY0YmY0N2ZkOWMz OTczN2IwHhcNMjUxMjE4MTkwMjAwWhcNMjUxMjE5MTkwMjAwWjAzMTEwLwYDVQQD EyhjZDAwOTI3ZmM4NDkxNmQzNzU2MDhmM2Y2MDAwZjk0MTBhNjU0MzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC5Mvq4Dg9l/NO7wmz53JE2pajFu 01NNgi+sSjtPGUNR28Q8IM4/pyCjBfMrFBhNA2JrwnvFlka1blN55bYl+DUIxvku ImcNLczKBZtriM/E4Xmm1/nUdm0pY3CbfTyfJqBDGK9tz6UUvHZojHrpmKQsdPjD emSXX0LqwVFnpk3jzF9mbeITeIas6LZUYrvvalu7Q8PsyuAgvWgI6mnnZMvnL6lz Fr6Xn4y6MjOhXGYXrInHFKHfGgbKedNslWnXIzbUc5Et4SSdAF/6g76JFPwgwns5 u8sNELcGFoUrrsyJOO3KcDmHyfVXXueOBhuJl+FOzgissmGNVCXQNNUdHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0Akn/ISRbTdWCPP2AA+UEKZUNjMB8GA1UdIwQY MBaAFPWJgjuhR1gAfN6HOvS/R/2cOXN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEt OWJhNGVjMzFjYjZiLzEvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEtOWJhNGVjMzFjYjZi LzEvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhJxsuFj 5oZFe1GFFvSRG242XaydzKhQSVmzaY6au8qALldP1OARmMTehf4UIta4I2nDtpi5 FG6QkBi7MxKdLto1w6lZUcOdgAGZeltZAaSAY3VKTE++g0mLhXNiH1eMmBUdvwzh uJEkMV+rNGOIfyPFKRpKl7Aa4feF1MaKdNSEbKOtQ28BWcmtFdJpE0K4ygzkC41e Dsezdk55KzGoxyLJFQIPVclAUFXFXdU84VQxKoMFhAphMG57r+wrHP2Y1Kx+oS3o lEROIl30Mz7HWAtrjin7fexzddwwVrV2Aop1UQlXCw1MPK7jpMv9/GILWt7WzRY2 scC7bV6Lzm7vEA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:50:55 2025 by rpki-client